Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: qTfq95oEFl6QddUlz2Juh5jHdAOHcueZ3OTSzMPgz5A=
Subject key identifier: 27:EE:2F:72:C6:0E:31:0C:66:96:0C:E5:53:32:9D:1A:C0:86:15:A1
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019A71B7EC52AE5F95DCD204EAF1EA35906B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 1279
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: j5jEkGQxzSdylvv163V3Enn4Fanqn6ik1g43zx8oiU8=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ec:52:ae:5f:95:dc:d2:04:ea:f1:ea:35:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=27ee2f72c60e310c66960ce553329d1ac08615a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:92:a3:10:24:41:cf:90:1c:5e:7a:ea:62:
07:36:d5:15:4d:98:84:48:11:77:b9:4b:79:b2:c5:
18:47:f7:ea:8e:a6:1e:ae:7d:88:8b:3a:23:cc:c6:
1f:11:97:51:ba:f6:16:4f:f8:2d:ec:f4:95:cb:8e:
03:df:bb:d9:51:ae:eb:dc:05:6f:60:30:6c:fc:60:
9f:29:7c:7f:fb:59:f2:97:e6:f4:64:8f:1a:3c:21:
65:a8:da:fa:ed:c2:e9:32:cb:84:53:1f:7c:18:5b:
25:49:ff:c3:a0:77:d8:f7:97:27:0b:00:e6:65:83:
c7:4b:0f:84:ba:cf:62:39:e5:34:c8:2a:a8:85:43:
c7:d1:6c:cc:63:fa:2e:17:ee:53:15:d5:c7:29:f0:
0b:b9:0c:40:19:eb:7a:71:98:4d:27:8b:6c:7f:95:
a4:ec:f5:4e:35:55:1d:65:0a:2a:54:58:7e:33:5e:
34:ac:c4:09:1a:6e:0d:c6:54:29:bd:d7:d8:f9:d9:
c4:dc:49:81:d4:16:29:fc:1a:34:b5:fc:c8:5c:af:
df:1c:57:80:67:00:76:05:07:b4:fa:0b:28:79:0c:
14:3f:49:94:fd:a3:64:14:6f:09:85:65:3a:f4:a1:
32:8e:cf:88:2e:f8:52:2e:2e:d1:d8:75:a3:f6:6f:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:2F:72:C6:0E:31:0C:66:96:0C:E5:53:32:9D:1A:C0:86:15:A1
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f9:9d:19:df:45:82:1f:41:ef:31:ad:c7:f2:91:d9:b5:1c:
b9:b9:a8:a4:df:e9:a5:98:60:2f:77:99:80:29:44:de:d0:fb:
0b:65:53:d6:33:e2:be:e3:3b:9c:cd:e9:97:34:62:ef:3b:b3:
c1:86:b2:99:2f:c4:d8:1c:18:e9:db:8c:ae:26:b4:ba:81:9c:
18:22:fe:95:75:c4:7d:0f:ec:ec:e2:93:19:a9:40:48:6e:bd:
be:14:a0:34:ee:fb:bc:45:d9:6d:6c:dc:4a:41:90:1c:50:6a:
3f:d4:51:63:f7:8d:77:44:47:45:63:1f:f8:bd:89:8b:bd:bf:
fc:4c:cb:94:9f:9a:f6:3b:10:40:45:0a:17:02:c0:0a:48:99:
a3:0f:05:da:68:ab:47:ae:08:e3:c9:20:47:49:52:65:7c:c4:
f2:e9:28:71:b9:38:cf:30:62:cd:11:3f:e1:5d:4b:2d:ff:a9:
ac:13:1f:df:11:02:c3:34:00:7d:7a:75:b4:5c:ef:e0:f2:7d:
f0:8f:df:7c:a5:cd:e4:27:47:5c:85:53:15:9b:58:c5:d7:60:
da:b4:f8:69:b4:c8:31:da:6d:83:bd:28:e3:55:9c:ee:6b:95:
5c:ad:3c:f3:71:8a:9c:d5:0e:42:45:55:bc:29:69:31:9d:68:
78:26:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:05 2025 by rpki-client